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IN THE CLAIMS: 



1-20. (Cancelled) 



1 21 . (Previously Presented) A method for use in a negotiated graceful takeover in a com- 

2 puter cluster having a first and second computer, the method comprising the steps of: 

3 detecting an operational fault at the first computer; 

4 requesting, from the first computer, in response to the operational fault, that the 

5 second computer take over for the first computer; 

6 requesting, from the second computer, that the first computer shut down; 

7 completing service requests at the first computer pending at the time the first 

8 computer was requested to shut down; 

9 transferring responsibilities of the first computer to the second computer; and 

10 shutting down the first computer. 

1 22. (Previously Presented) The method as in claim 21, further comprising: monitoring, 

2 from the second computer, for any operational faults at the first computer. 



1 23. (Previously Presented) The method as in claim 21, further comprising: diagnosing, 

2 at the first computer, the operational fault of the first computer. 

1 24. (Previously Presented) The method as in claim 21, further comprising: requesting, 

2 from the first computer, that the second computer diagnose the operational fault of the 

3 first computer. 
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1 25. (Previously Presented) The method as in claim 21, further comprising: diagnosing, 

2 at the second computer, the operational fault of the first computer. 

1 26. (Previously Presented) The method as in claim 21, further comprising: sending, 

2 from the first computer to the second computer, an indication of the type of operational 

3 fault detected at the first computer. 

1 27. (Previously Presented) The method as in claim 21, further comprising: determining, 

2 at the second computer, if the second computer can take over for the first computer be- 

3 fore requesting the shut down of the first computer. 

1 28. (Previously Presented) The method as in claim 21, further comprising: refusing fiir- 

2 ther service requests at the first computer after the first computer was requested to shut 

3 down. 

1 29. (Previously Presented) The method as in claim 21, further comprising: transferring 

2 access of a storage device for the first computer to the second computer. 

1 30. (Previously Presented) The method as in claim 21, further comprising: asserting, at 

2 the second computer, disk reservations of disks of the first computer. 

1 31. (Previously Presented) The method as in claim 21, further comprising: rerouting file 

2 service requests from the first computer to the second computer. 
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1 32. (Previously Presented) The method as in claim 21, further comprising: activating, at 

2 the second computer, network interfaces and network addresses that replicate those of the 

3 first computer. 

1 33. (Previously Presented) The method as in claim 21, further comprising: initiating a 

2 countdown timer subsequent to the shut down request from the second computer. 

1 34. (Previously Presented) The method as in claim 33, further comprising: forcing the 

2 first computer to shut down in the event the first computer is still operating at the expira- 

3 tion of the countdown timer. 

1 35. (Previously Presented) The method as in claim 21, further comprising: detecting, at 

2 the second computer, the shut down of the first computer by the absence of a periodic 

3 heartbeat signal. 

1 36. (Previously Presented) The method as in claim 21, further comprising: storing, at the 

2 first computer, state information of the first computer prior to shutting down. 

1 37. (Previously Presented) The method as in claim 21, further comprising: sending peri- 

2 odic requests from the second computer to the first computer to remain shut down, after 

3 the first computer has shut down. 

1 38. (Previously Presented) The method as in claim 21, further comprising: requesting, 

2 from the first computer, that the second computer restore responsibilities of the first com- 

3 puter to the first computer. 
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1 39. (Previously Presented) The method as in claim 21, further comprising: restoring re- 

2 sponsibilities of the first computer to the first computer upon restart of the first computer. 

1 40. (Previously Presented) The method as in claim 21, further comprising: restoring re- 

2 sponsibilities of the first computer to the first computer upon curing the operational fault 

3 of the first computer. 

i 41 . (Previously Presented) The method as in claim 21, further comprising: using the first 



2 and second computers as a file servers. 

1 42. (Previously Presented) A storage system capable of performing a negotiated graceful 

2 takeover, the storage system comprising: 

3 a first computer; 

4 a second computer; 

5 a first processor for the first computer to 

6 i) detect an operational fault at the first computer, and 

7 ii) request, in response to the operational fault, that the second computer 

8 take over for the first computer; and 

9 a second processor for the second computer to 

10 i) request that the first computer shut down, 

n ii) allow the first computer to complete service requests pending at the 

12 time the first computer was requested to shut down, 

13 iii) take over any responsibilities of the first computer, and 
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14 iv) allow the first computer to shut down. 

1 43. (Previously Presented) The storage system as in claim 42, further comprising: a 

2 failover monitor to monitor for any operational faults at the first computer. 

1 44. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 first processor to diagnose the operational fault of the first computer. 

1 45. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 first processor to request that the second computer diagnose the operational fault of the 

3 first computer. 

1 46. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 second processor to diagnose the operational fault of the first computer. 

1 47. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 first processor to send, to the second computer, an indication of the type of operational 

3 fault detected at the first computer. 

1 48. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 second processor to determine if the second computer can take over for the first computer 

3 before requesting the shut down of the first computer. 
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1 49. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 first processor to refuse further service requests at the first computer after the first com- 

3 puter was requested to shut down. 

1 50. (Previously Presented) The storage system as in claim 42, further comprising: 

2 a storage device for the first computer; and 

3 an interconnect to transfer access of the storage device for the first computer to 

4 the second computer. 

i 51. (Previously Presented) The storage system as in claim 42, further comprising: disks 



2 of the first computer, the disks to be reserved by the second computer while the first 

3 computer is shut down. 

1 52. (Previously Presented) The storage system as in claim 42, further comprising: an 

2 interconnect to reroute file service requests from the first computer to the second com- 

3 puter. 

1 53. (Previously Presented) The storage system as in claim 42, further comprising: 

2 network interfaces at the first computer; 

3 network addresses at the first computer; 

4 network interfaces at the second computer that replicate the network interfaces of 

5 the first computer; and 

6 network addresses at the second computer that replicate the network interfaces of 

7 the first computer, the network interfaces and addresses at the second computer that rep- 
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licate the network interfaces and addresses of the first computer to be activated by the 
second computer while the first computer is shut down. 

54. (Previously Presented) The storage system as in claim 42, further comprising: a 
countdown timer, the countdown timer to be initiated subsequent to the shut down re- 
quest from the second computer. 

55. (Previously Presented) The storage system as in claim 54, further comprising: an 
interconnect to force the first computer to shut down in the event the first computer is still 
operating at the expiration of the countdown timer. 

56. (Previously Presented) The storage system as in claim 42, further comprising: an 
interconnect at the second computer to detect the shut down of the first computer by the 
absence of a periodic heartbeat signal. 

57. (Previously Presented) The storage system as in claim 42, further comprising: per- 
sistent memory at the first computer to store state information of the first computer prior 
to shutting down. 

58. (Previously Presented) The storage system as in claim 42, further comprising: an 
interconnect at the second computer to send periodic requests to the first computer to re- 
main shut down, after the first computer has shut down. 
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1 59. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 first processor to request that the second computer restore responsibilities of the first 

3 computer to the first computer. 

1 60. (Previously Presented) The storage system as in claim 42, further comprising: an 

2 interconnect to restore responsibilities of the first computer to the first computer upon 

3 restart of the first computer. 

1 61. (Previously Presented) The storage system as in claim 42, further comprising: an 

2 interconnect to restore responsibilities of the first computer to the first computer upon 

3 curing the operational fault of the first computer. 



1 62. (Previously Presented) The storage system as in claim 42, further comprising: the 

2 first and second computers are file servers. 

1 63. (Previously Presented) A storage system capable of performing a negotiated graceful 

2 takeover, the storage system comprising: 

3 a first computer; 

4 a second computer; 

5 means for detecting an operational fault at the first computer; 

6 means for requesting, from the first computer, in response to the operational fault, 

7 that the second computer take over for the first computer; 

8 means for requesting, from the second computer, that the first computer shut 

9 down; 
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means for completing service requests at the first computer pending at the time 
the first computer was requested to shut down; 

means for transferring responsibilities of the first computer to the second com- 
puter; and 

means for shutting down the first computer. 

64. (Previously Presented) A computer readable media, comprising: the computer read- 
able media containing instructions for execution in a processor for the method of, 

detecting an operational fault at a first computer; 

requesting, from the first computer, in response to the operational fault, that a 
second computer take over for the first computer; 

requesting, from the second computer, that the first computer shut down; 

completing service requests at the first computer pending at the time the first 
computer was requested to shut down; 

transferring responsibilities of the first computer to the second computer; and 

shutting down the first computer. 

65. (Previously Presented) Electromagnetic signals propagating on a computer network, 
comprising: the electromagnetic signals carrying instructions for execution in a processor 
for the method of, 

detecting an operational fault at a first computer; 

requesting, from the first computer, in response to the operational fault, that a 
second computer take over for the first computer; 

requesting, from the second computer, that the first computer shut down; 
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completing service requests at the first computer pending at the time the first 
computer was requested to shut down; 

transferring responsibilities of the first computer to the second computer; and 

shutting down the first computer. 
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